Work Instructions and Audits

Chart, graph, sampling, plan, calculation, z1.4

Question

Regarding ISO 9001: 2008 (or 2015) auditing, I have always been trained that a work instruction when implemented as supporting the QMS can be audited as it is supporting the effectiveness of the QMS. I was recently told by a business owner that not only is that not true, he does not have to show me his work instruction.  I would like to reply with a clear technical response. Can anyone share their view on this?

Answers

Thank you for your question.   Of course you know you’re right.  It sounds like you have a major nonconformance against Clause 5.1 on your hands.

Denis Devos
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

ISO 9001:2015 clause 7.5.1b states the following :
The organization’s quality management system shall include: documented information determined by the organization as being necessary for the effectiveness of the quality management system/

 Documented information includes both procedures and records see appendix A.3 (Documented information). 

 Since the work instructions are supporting the QMS, it is part part of the QMS, and can be audited as part of both the internal audit and external audit.  It appears that part of the confusion may be caused by a lack of understanding of the new term “documented information.”

John G. Surak, PhD
– Providing food safety and quality solutions –
tel: 1-864-506-2190
skype:  john.surak
email: jgsurak@yahoo.com
A member of Stratecon International Consultants
http://www.stratecon-intl.com/jsurak.html

Verification or Calibration?

Question

There is a second part to 7.6 para “a” which reads; “where no such standards exist, the basis used for calibration or verification shall be recorded.” It is clear for shops that are complying to the ISO 9001:2008(E) we need to have measurement standards traceable to international or national measurement standards. My question has to do with cylindrical plug gages that are used at the machines to verify manufactured print dimensions. The pins/plug gages are not sent out at intervals for calibration however, they are compared to a traceable measurement standard before being issued to the manufacturing area. We consider these gages to be calibrated “as used ” and we do not record the intial actual size of the pins/plug gage but issue it only on the basis that the size was verified against a traceable measurement standard. Are we required per Para 7.6 to record the actual size of the pins/plug gages?

Answer

Thank you for your question.  What you are describing is verifying prior to use, rather than calibration.    If the rings or other standards being used to check these plug gauges each day are properly calibrated and traceable to national standards, you are compliant with ISO 9001:2015.  If you are registered to AS 9100 or TS 16949, stricter requirements will apply and you may not be meeting those requirements for recording variable results of calibration.

Denis Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

Clauses 8.4.1 and 8.4.2 in 9001: 2015

Mr. Pareto Head and IT

Question

The insurance company I am temporarily helping on quality is limiting its ISO 9001 certified perimeter to the administration of contracts and claims.
With regard to clauses 8.4.1 and particularly 8.4.2 of ISO 9001:2015, should the other internal entities of the company (.i.e HR, IT, Sales Dept, …) absolutely necessary but outside of the perimeter be considered exactly like external providers – just like a provider of IT, for instance – or should they be considered as internal providers with a limited control of their contribution to the QMS through a simplified SLA? Of course, SLAs will be put in place in order to secure the relationship of these internal entities with the perimeter.

I thank you in advance for your help/interpretation of clauses 8.4.1 and 8.4.2 applied to the case submitted.

Answer

Thank you for your question.   Yes, that is an appropriate interpretation, but let me add three comments.

Firstly, recognize that your support functions are captive within your organization and therefore not subject to all of the same conditions that would be imposed on an outside service provider.   For example, you can’t stop doing business with them if you are not happy with their service.  I like your idea for an SLA – keep it simple, but outline your requirements and expectations for their support services.

Secondly, use your process approach (clause 4.4) to define the boundaries of your QMS and how those other external departments interface with you.  This will be helpful in helping your team and others to understand the relationship between your QMS and the rest of the organization.

Thirdly, take advantage of the Context of the Organization analysis (clause 4.1) to further explore those relationships and that will help to determine the level of control you require over those support functions.

Denis Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

“Shall Be Determined” in 9001

Question

Many of the Quality Management Systems requirements in the ISO 9001: 2015 manual include the verbiage “shall be determined.”  I need to be sure that I understand exactly what this means in this context.  For example, “4.4  QMS and its processes 4.4.1 a)  The inputs required and the outputs expected of the QMS processes are determined.”   Does this mean that there should be process or work instruction written describing this?  Does it mean that there should be documentation showing the development of this information?

Answer

Thank you for your question.  It might be useful to look at the definition of the word determine.  According to the Oxford Dictionary:  Determine means to “Ascertain or establish exactly be research or calculation”, Merriam Webster has a similar definition:  “to find out about or come to a conclusion about by investigation, reasoning, or calculation.

Now to your question.  There does not need to be a procedure about how things are determined.  The output, or the determination itself, will serve as evidence that you did it.  But determine things in an honest way.  You and your CB auditor will assess the reasonableness of your determinations based on the context of your organization.  For example, if you are a hospital, and you “determine” that surgeons do not need to wash their hands, you should be subject to a nonconformance for getting that wrong.    In your example, taken from clause 4.4, the best way to do this is to create a flowchart(s) showing a series of process steps and their interactions.  The arrows in and out of each box along with explanatory text, will demonstrate that you have determined the inputs and outputs of each process step.

Denis Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

Customer Satisfaction

Question

The question is about 9.3.2.1 in IATF 16949. It said the input to management review shall include (f) customer satisfaction. Because that clause is supplemental to ISO 9001, 9.3.2, where C (1) customer satisfaction and feedback from relevant interested parties is inclusive, why does it repeat here? I asked to see 9.2.1 in ISO 9001 but I didn’t see any specific difference between them.

Answer

That’s a very good question, and you’re right that it’s a subtle difference.  It seems that the reference to clause 9.1.2 in the 16949 clause 9.3.2.1 makes it very specific and deliberate that the customer satisfaction being referred to must include “perception” (9.1.2) and that the customer satisfaction in management review will be derived from how “the organization shall determine the methods for obtaining, monitoring and reviewing this information”  (9.1.2).   I hope you find this clarification helpful.

Denis J. Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

Creating a Culture of Quality

ASQ Global State of Quality 2016

Question

I was introduced to Quality Management (& ISO 9001:2015) recently. The culture of the organization that I am concerned with has not embraced Quality Management, and it is often the subject of outright and unprofessional antagonism. I seek direction in order to arm myself with greater knowledge or qualifications as well as change attitudes toward Quality Management at all levels within the organization. I thought that ASQ would be a good resource. Since there are so many channels, a plethora of literature, and various certifications and conferences, I am a bit overwhelmed. I need to focus my efforts, and I hope to be able to do so with some direction from a professional who can relate to such growing pains. Thank you.

Answer 1

Thank you for your question.  I can certainly to relate to you and your plight – I was in a similar circumstance early in my career.   If you were introduced to ISO 9001 this year, I have to assume that your company is not yet registered.   Most manufacturing companies are required by their customers to have registration, but if you are not in that situation, you have to sell Quality Management on its own merit.  The bad news is, that if your senior management doesn’t want a Quality Management System, there is nothing you can do about that.  Now, that being said, you can begin by examining some of the “pain points” in your organization and showing how quality tools can help to solve them.  Management will never embrace quality until they see what is in it for them.   You can start with an analysis of the Cost of Poor Quality.  When your leadership sees the cost of nonconformance, they will be keen to bring those costs down.  COPQ typically includes the cost of external customer complaints, replacing products, late deliveries, and internal costs such as scrap, rework, re-makes etc.  If there has ever been a problem that traces back to not properly understanding a customer’s needs, that is a text-book example of how Quality Management can help.  Start with that.   Look at the costs of poor quality, and sell the idea of using quality tools to bring those costs down.  You will have no chance of selling your management on quality until they can see what’s in it for them.  Good Luck!

Denis J. Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

Answer 2

it sounds like this company needs a culture change. This change can happen only at the direction of the company’s leadership.
Here’s some suggestions:

  1. Each department head has to establish three (3) measurable goals on how his/her department is improving on the quality of their department’s output/work.  These are to be reported at each executive monthly meeting.  Department manager’s must be held accountable for lack of quality improvements.
  1. Every individual’s performance review must include “quality performance.”  This also needs to be measurable (less than last year, improved customer satisfaction from surveys, reduced ‘cost-of-quality’, reduced audit nonconformance observations, etc.)
  1. If the company has a bonus program, individuals/departments bonus is tied into quality performance.  ISO observation means 10% or more cut in bonus.
  1. Have top executives hold meetings on the need for quality and it’s everyone’s responsibility – not just the QA department.  If employees don’t like it they are welcomed to find employment elsewhere.

Jim

Jim Werner
Voting member to the U.S. TAG to ISO TC 176 Quality Management and Quality Assurance
Medical Device Quality Compliance (MDQC), LLC.
ASQ Senior Member
ASQ CQE, CQA, RABQSA Lead QMS Assessor

Audit Versus Inspection?

Audit, audit by exception

Question

Would you please tell me what the differences between audit and inspection are?

Answer

This is a great question.   We can start with the definitions of inspection and audit per the new ISO 9000:2015 standard.  Inspection is “Determination of conformity to specified requirements”  (3.11.7)  and Audit is “systematic, independent and documented process for obtaining objective evidence and evaluating it objectively to determine the extent to which audit criteria are fulfilled”  (3.13.1).    Without parsing the words to much, the difference is one of scale:  Inspection is most often associated with inspecting a product or a service to make sure it is right, and an audit is most often associated with a higher-level review of the system that is designed to produce and inspect the product or service.    An audit of a manufacturing process wouldn’t just inspect the product, it would ensure (at a system level) that required inspections had already been performed on the product.  I have often made the differentiation in the following way… “An inspection is down in the grass, but to do an audit, you have to climb a tree.”  The reflects the difference in purpose and perspective for an audit.   Other authors, such as Arter, Sayle, and Russell refer to inspections as ‘backward looking’, that is, what was actually done to provide a product or service, while audits are ‘forward looking’.   Audits ensure that proper management controls are in place to ensure product quality into the future.   Instead of inspecting quality in (to a product produced in the past), an audit evaluates how well a quality system will predict and prevent quality problems (in the future).   My three favourite references are Quality Audits for Improved Performance by Dennis Arter, Management Audits, by Allan Sayle, and the ASQ Auditing Handbook, edited by JP Russell.

Thanks very much,

Denis J. Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

Value Stream Mapping

Question

We produce plastic fittings and pipes. We only have one process: only one machine is needed to produce a product.  Can we still benefit from Value Stream Mapping? If yes, could you please explain how?

Answer

Thank you for your question.  Value Stream Mapping (VSM) can benefit organizations of any size.  The fundamental question you want to answer is: How quickly can I receive an order, build it, and be paid for it?    This is “order-to-cash”.    Along the way, we look primarily at two things – how quickly and smoothly can I get a build order to flow through my factory, and how do I minimize raw material inventory and work-in-process inventory during that process?    Value stream mapping can benefit your organization by answering some of the following questions…. How long do I wait for raw material (e.g., am I buying from down the street, or does it take months to arrive from China)?  How long is a customer order in hand before I start up my machines to produce it? How long is my machine set-up?  How long does work in process sit between machines?  How long does material sit in the back of the plant before it is shipped?   How long does it take me to get paid?    Value stream mapping can help to answer these questions and challenge your organization to continuously shrink these times.     I had one client who got very good at this.  They insisted on payment from key customers within 30 days, and had payments terms of 60 days with their suppliers.    In many cases, they were paid for their products before they even had to pay for their raw materials.  That’s lean!

Denis.

Denis J. Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
www.DevosAssociates.com

ISO 17025 and Business Changes

ISO/IEC 17025:2017 General requirements for the competence of testing and calibration laboratoriesQuestion

My organization has just been recently accredited to ISO/IEC 17025:2005. Shortly thereafter, changes were made to the organization’s structure and business operations.  I would like to know:

1) When should these changes be reflected in the Quality Manual?

2) Do I need to advise the local registrar about the changes?

3) Are these changes time-sensitive that need to be reported to the certifying body to maintain certification or, should I just wait for the next surveillance audit coming in about six (6) months?

Answer

Thank you for your question.  Updates to your Quality Management System and Quality Manual should be made as soon as they are implemented.  I would suggest notifying your CB of the changes now and let them plan for auditing these changes.  They will likely want to roll that into your next surveillance and not make a special visit.  That decision, of course, would be up to them.

Denis.

Denis J. Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com

TS 16949, ISO 9001

Automotive inspection, TS 16949, IATF 16949

Question

Our company designs and manufactures commercial and automotive semiconductor products. We used to maintain dual certification (ISO9001 and TS16949) for all of our manufacturing and assembly locations, but recently dropped the ISO9001 certification.  My questions are as follows:

1) If we manufacture automotive and non automotive products in the same location “site”, without dedicated separation, does the TS certification eligibility apply to the entire site?

2) Can we include the non automotive design RSLs in the TS16949 certificate scope, or would we need a separate ISO9001 certificate to cover those activities?

Answer

Thank you for your question.   Yes, TS 16949 requirements would apply to all of your “automotive” processes whether they produce/support only automotive products or not.   This is actually the way you’d want to do it:  it would be more complicated to try to have two systems for automotive and non-automotive products.    If you have only one certification, the scope of your audits would have to be your whole product line, and not just your automotive products.

The answer to your second question is again related to the scope of your registration.   If you are not design-responsible for the automotive side of your business there is a risk that your TS 16949 audits (internal and external) do not include your design function.    If you want your design activity in scope, work with your registrar to roll it into your scope of registration.  Understand that if you do it that way, your non-automotive design would be subject to all of the additional 7.3 controls listed in TS 16949.  Although you should be able to cover it under one registration, It will be up to them if they want you to split it out into a separate ISO 9001 registration.  The impact of that difference should be minimal.

Please let us know if you have any follow-up questions related to this answer.

Denis

Denis J. Devos, P.Eng
A Fellow of the American Society for Quality
Devos Associates Inc.
(519) 476-8951
www.DevosAssociates.com